Identity & Access Management Security

Scope of work:

Security Engineer with knowledge of Identity and Access Management to join the IAM Program in our Excalibur team. The IAM Engineer will work with business units to guide them in implementing the correct solutions for their needs while adhering to our standards and best practices.

Also work with multiple parts of Global Information Security as well as other organizations to define and evaluate policies, standards and solutions for enterprise and business use.

Required skills/competencies:

A minimum of 3 years’ experience working on system and infrastructure IAM is mandatory.

MUST be experienced (at least 3 years) with implementing and optimizing solutions using many of the following technologies and concepts:

Active Directory (Must be familiar with forest and domain design, trusts, directory structure, GPO, security best practices, etc.)

Access Management using standard solutions such Oracle Access Manager, Saviynt, ForgeRock, etc.

Single Sign-on and Federation using standard protocols and frameworks such as Kerberos, SPNEGO, SAML 2.0, ADFS, OpenID Connect, etc.

Privileged Access Management using solutions such as Lieberman, Thycotic, CyberArk, etc

Two-factor Authentication (Legacy One-Time Password solutions, Push Authentication)

Adaptive Authentication

Identity Management (requesting, automated provisioning, de-provisioning, reconciliation, certification, etc.)

Public and Private Cloud IAM (Familiarity with IDaaS solutions such as Azure AD and Okta as well as securing SaaS)

Windows Security

PKI

SSH Key Management

The following skills are also required :

Solid written and verbal communication

Effective at presenting information to different audiences at the correct level of detail (i.e., from engineering teams to executive management)

Capable of working on multiple projects simultaneously

Capable of solving complex problems

Capable of defining strategic and tactical solutions, and knowing when each applies

Experience and/or interest in developing security policies and standards